Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/eQxNMMvRDNCJCtCh2e2TQDAZ_ao.roa
File: eQxNMMvRDNCJCtCh2e2TQDAZ_ao.roa (raw, json)
Hash identifier: U/ZR91lWCIrADUFhA7IJ9YRdVU17/S6ltGDgTKAHlic=
Subject key identifier: 79:0C:4D:30:CB:D1:0C:D0:89:0A:D0:A1:D9:ED:93:40:30:19:FD:AA
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 019D3793F8D37EE5606DE1980EBA47930367
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/eQxNMMvRDNCJCtCh2e2TQDAZ_ao.roa
Signing time: Sun 29 Mar 2026 03:12:17 +0000
ROA not before: Sun 29 Mar 2026 03:12:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48359
IP address blocks: 45.155.192.0/24 maxlen: 24
45.155.193.0/24 maxlen: 24
45.155.194.0/24 maxlen: 24
45.155.195.0/24 maxlen: 24
91.213.167.0/24 maxlen: 24
91.213.172.0/24 maxlen: 24
185.47.48.0/23 maxlen: 23
185.47.48.0/24 maxlen: 24
185.47.49.0/24 maxlen: 24
185.47.50.0/23 maxlen: 23
185.47.50.0/24 maxlen: 24
185.47.51.0/24 maxlen: 24
185.82.64.0/22 maxlen: 22
185.82.64.0/24 maxlen: 24
185.82.65.0/24 maxlen: 24
185.82.66.0/24 maxlen: 24
185.82.67.0/24 maxlen: 24
185.121.56.0/22 maxlen: 22
185.121.56.0/24 maxlen: 24
185.121.57.0/24 maxlen: 24
185.121.58.0/24 maxlen: 24
185.121.59.0/24 maxlen: 24
185.125.20.0/24 maxlen: 24
185.125.21.0/24 maxlen: 24
185.125.22.0/24 maxlen: 24
185.125.23.0/24 maxlen: 24
185.137.60.0/22 maxlen: 24
185.137.60.0/24 maxlen: 24
185.137.61.0/24 maxlen: 24
185.137.62.0/24 maxlen: 24
185.137.63.0/24 maxlen: 24
185.142.92.0/22 maxlen: 22
185.142.92.0/24 maxlen: 24
185.142.93.0/24 maxlen: 24
185.142.94.0/24 maxlen: 24
185.142.95.0/24 maxlen: 24
185.142.124.0/22 maxlen: 22
185.142.124.0/24 maxlen: 24
185.142.125.0/24 maxlen: 24
185.142.126.0/24 maxlen: 24
185.142.127.0/24 maxlen: 24
185.212.192.0/24 maxlen: 24
185.212.193.0/24 maxlen: 24
185.212.195.0/24 maxlen: 24
185.221.192.0/22 maxlen: 22
185.221.192.0/24 maxlen: 24
185.221.194.0/24 maxlen: 24
185.221.195.0/24 maxlen: 24
185.238.44.0/24 maxlen: 24
185.238.45.0/24 maxlen: 24
185.238.46.0/24 maxlen: 24
185.238.47.0/24 maxlen: 24
193.246.174.0/24 maxlen: 24
193.246.175.0/24 maxlen: 24
193.246.200.0/24 maxlen: 24
193.246.201.0/24 maxlen: 24
195.8.110.0/24 maxlen: 24
195.8.112.0/24 maxlen: 24
195.8.114.0/24 maxlen: 24
195.191.22.0/24 maxlen: 24
195.191.23.0/24 maxlen: 24
195.191.44.0/24 maxlen: 24
195.191.45.0/24 maxlen: 24
195.230.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:93:f8:d3:7e:e5:60:6d:e1:98:0e:ba:47:93:03:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Mar 29 03:12:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=790c4d30cbd10cd0890ad0a1d9ed93403019fdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:23:3c:0a:5f:83:4a:dc:52:fa:e8:b3:59:
d3:88:de:44:1d:7b:dd:96:26:ad:4a:79:eb:5f:86:
6e:4b:a7:69:63:d6:a6:cc:c5:88:d7:3d:33:a3:05:
9d:86:17:99:8d:b7:7f:8d:59:63:c1:12:fd:8a:bd:
79:da:e1:1a:01:ec:7e:d6:ca:c9:f9:47:ca:ac:29:
bd:e4:7f:60:80:b6:58:16:a0:e6:fd:54:81:55:c9:
33:19:98:6c:15:85:77:1c:eb:e2:ef:29:b0:28:97:
44:e7:02:0d:77:38:7b:f4:9b:02:ae:80:58:2c:95:
3e:98:66:19:12:36:09:24:08:6b:a6:aa:5b:c3:a5:
cf:5d:cd:3a:41:24:17:91:36:aa:16:15:17:c8:bc:
61:ae:52:42:20:ae:6e:d3:89:6d:fe:43:3d:ba:d3:
65:2a:f9:c5:96:d7:52:f9:c3:3f:e4:b9:1e:71:2a:
b8:4b:1a:88:df:76:c5:27:6c:56:31:76:c6:c8:b6:
40:57:d7:d9:90:89:96:1c:31:f6:34:ac:31:52:2e:
25:b9:f2:29:4c:4c:95:60:43:dd:ed:a6:cb:a2:4f:
e2:ab:44:61:f8:a2:ad:bf:81:7a:86:18:d1:ea:63:
ed:06:4d:72:94:21:f7:b8:6c:c9:61:1f:2d:70:bc:
59:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0C:4D:30:CB:D1:0C:D0:89:0A:D0:A1:D9:ED:93:40:30:19:FD:AA
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/eQxNMMvRDNCJCtCh2e2TQDAZ_ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.192.0/22
91.213.167.0/24
91.213.172.0/24
185.47.48.0/22
185.82.64.0/22
185.121.56.0/22
185.125.20.0/22
185.137.60.0/22
185.142.92.0/22
185.142.124.0/22
185.212.192.0/23
185.212.195.0/24
185.221.192.0/22
185.238.44.0/22
193.246.174.0/23
193.246.200.0/23
195.8.110.0/24
195.8.112.0/24
195.8.114.0/24
195.191.22.0/23
195.191.44.0/23
195.230.97.0/24
Signature Algorithm: sha256WithRSAEncryption
54:01:f5:7b:c3:c5:3f:ca:8a:06:5f:fb:1b:5e:16:06:32:d7:
88:a9:0a:ee:ec:44:cf:b4:ab:16:d8:9f:65:e5:c9:0b:7a:b2:
63:20:9e:4b:c2:8b:dc:47:58:48:b2:5e:7a:d6:bb:93:d0:bf:
cb:e4:ac:47:87:5b:9e:5e:1e:d4:87:74:c5:f7:e2:10:a7:c9:
0e:fb:0a:6f:10:dc:48:0f:41:4c:47:9d:f7:37:80:cb:4c:88:
ad:0a:e6:b2:82:90:eb:91:72:a4:67:75:00:fc:7c:1b:09:d4:
12:2f:ca:4b:50:4a:8d:05:df:d4:ae:5a:69:5e:fa:00:ca:37:
35:f0:70:80:12:72:36:c7:df:f2:85:63:b8:2a:51:dd:a5:ce:
5e:9e:4c:fc:3b:20:bf:e0:83:44:2f:04:ee:a3:bf:87:93:8d:
c6:08:a7:fa:c7:a3:e1:80:ed:f7:7c:79:42:eb:2c:61:70:38:
69:9b:0a:c4:9b:8e:d4:3a:58:25:74:15:29:2b:5f:eb:02:e0:
c1:ae:17:9d:5e:1d:9b:a3:d0:fe:9c:54:51:17:cb:39:fd:1f:
3a:02:56:24:94:9d:16:93:26:cc:7d:b1:1d:ea:08:d9:6f:ae:
66:cd:0e:7a:52:9d:02:84:7f:ec:5c:0a:b2:36:99:16:ee:bd:
93:ca:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:11 2026 by rpki-client